Date: Thu, 27 Oct 2016 10:00:35 -0500 From: "Matthew D. Fuller" <fullermd@over-yonder.net> To: Mathieu Arnold <mat@FreeBSD.org> Cc: David Demelier <demelier.david@gmail.com>, Don Lewis <truckman@freebsd.org>, mad@madpilot.net, freebsd-ports@freebsd.org Subject: Re: lighttpd does not pull OpenSSL dependency Message-ID: <20161027150035.GP79735@over-yonder.net> In-Reply-To: <bd8cf64a-7c04-d58b-b9ab-1abbb4cc062b@FreeBSD.org> References: <201610252214.u9PME6br070248@gw.catspoiler.org> <ded708c9-f2bf-6b2f-84cf-f97f91c39888@FreeBSD.org> <CAO%2BPfDdXbbgVMZnxiJig%2B_drLNYRftD4ruqXxHpybztiR1eBAA@mail.gmail.com> <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org> <CAO%2BPfDdJ7wv-rzrX7bTRhfY1W_qcL3%2BgZthqy-aq0sqYhDVcgg@mail.gmail.com> <bd8cf64a-7c04-d58b-b9ab-1abbb4cc062b@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 27, 2016 at 03:05:03PM +0200 I heard the voice of Mathieu Arnold, and lo! it spake thus: > > Once you install openssl from ports, the ports framework will use > it, always. That is absolutely not the case since OpenSSL in base was updated to .so.8 and ports wasn't re-bumped past it. Everything gets confused all the time. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209582 Even in an e.g. net/ntp rebuilt just now: % ldd /usr/local/sbin/ntpd | grep -E '(crypto|ssl)' libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x800cea000) libssl.so.8 => /usr/lib/libssl.so.8 (0x801ae6000) Just looking at a ldd through /usr/local I'm finding tons of things that are still linking to base libcrypto. STuff from ldns, nginx, Virtualbox, libwww, lots of X pieces... This makes me *EXTREMELY* nervous about upgrading _any_ systems where I'm using ports OpenSSL to stable/11. -- Matthew Fuller (MF4839) | fullermd@over-yonder.net Systems/Network Administrator | http://www.over-yonder.net/~fullermd/ On the Internet, nobody can hear you scream.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20161027150035.GP79735>